CVE-2017-12185 PUBLISHED

xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client to cause X server to crash or possibly execute arbitrary code.

EPSS 0.84% · 74.6th percentile

Risk Scores

EPSS Score
0.84%
74.6th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSxorg-server0, 2:1.18.4-0ubuntu0.6, 2:1.18.4-0ubuntu0.4
Ubuntu:14.04:LTSxorg-server-lts-xenial2:1.18.3-1ubuntu2.2~trusty2, 0, 2:1.18.3-1ubuntu2.2~trusty1
Ubuntu:14.04:LTSxorg-server2:1.15.1-0ubuntu2.10, 2:1.15.1-0ubuntu2.5, 2:1.15.1-0ubuntu2.6
Ubuntu:16.04:LTSxorg-server-hwe-16.040, 2:1.19.3-1ubuntu1~16.04.3, 2:1.18.4-1ubuntu6.1~16.04.1

Timeline

References

Open in Interactive Console →